Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:26 p.m.8 views

CVE-2026-39655

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS5.4AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2026/05/26 8:16 a.m.7 views

CVE-2026-39655

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS0.00037EPSS
Exploits0References1
CVE
CVE
added 2026/05/26 6:50 a.m.17 views

CVE-2026-39655

CVE-2026-39655 applies to WordPress Mayosis Core plugin, affected through version 5.4.7. The issue is described as a Missing Authorization (Broken Access Control) vulnerability in TeconceTheme Mayosis Core, allowing exploitation due to incorrectly configured access control security levels. CVSS v...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/26 6:50 a.m.10 views

EUVD-2026-31801

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 6:50 a.m.4 views

CVE-2026-39655

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/26 6:50 a.m.6 views

CVE-2026-39655 WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/26 6:50 a.m.38 views

CVE-2026-39655 WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7...

5.3CVSS0.00037EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/26 6:42 a.m.10 views

WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Mayosis Core versions = 5.4.7...

5.3CVSS5.8AI score0.00037EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.6 views

WordPress plugin Mayosis Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.12 views

PT-2026-43195

Name of the Vulnerable Software and Affected Versions Mayosis Core versions prior to 5.4.7 Description Missing Authorization in TeconceTheme Mayosis Core allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 5.4.7...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References5
NVD
NVD
added 2025/04/25 10:15 a.m.9 views

CVE-2025-1565

The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remotedl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

7.5CVSS0.00551EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/25 9:21 a.m.30 views

CVE-2025-1565 Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remotedl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

7.5CVSS0.00551EPSS
Exploits0References2
CVE
CVE
added 2025/04/25 9:21 a.m.55 views

CVE-2025-1565

CVE-2025-1565 concerns the Mayosis Core WordPress plugin (versions ≤ 5.4.1). An Arbitrary File Read via library/wave-audio/peaks/remote_dl.php allows unauthenticated attackers to read server files containing sensitive data. Public advisories from Red Hat, NVD, CVE listings, and Patchstack corrobo...

7.5CVSS7.4AI score0.00551EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/25 9:21 a.m.3 views

CVE-2025-1565 Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remotedl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

7.5CVSS7AI score0.00551EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/25 12:0 a.m.3 views

PT-2025-17897 · WordPress · Mayosis Core

Name of the Vulnerable Software and Affected Versions: Mayosis Core plugin for WordPress versions up to, and including, 5.4.1 Description: The issue allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, via the...

7.5CVSS7.9AI score0.00551EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/04/25 12:0 a.m.3 views

WordPress plugin Mayosis Core 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.8AI score0.00551EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/04/24 9:40 p.m.2 views

WordPress Mayosis Core plugin <= 5.4.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Tonn in WordPress Plugin Mayosis Core versions = 5.4.1...

7.5CVSS8.4AI score0.00551EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder